Most Installed Spam WordPress Plugins

69 indexed plugins

Plugins

69

Active Installs

8m+

Average Score

56

Audited

68

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1Akismet Anti-spam: Spam Protection3533996m+Non-prefixed global variable
#2Sucuri Security – Auditing, Malware Scanner and Security Hardening825111600k+Missing direct file access protection
#3WP Mail Logging3476258300k+Nonce verification recommended
#4CleanTalk Anti-Spam. Spam Firewall & Bot protection248181,092200k+Missing nonce verification
#5ReCaptcha v2 for Contact Form 7441230200k+Nonce verification recommended
#6Email Address Encoder411098100k+wp function not compatible with requires wp
#7Gravity Forms Zero Spam9449100k+trademarked term
#8Simple CAPTCHA with Cloudflare Turnstile3582148100k+Output is not escaped
#9Image CAPTCHA for Contact Form 7 and WPForms by HookAndHook (DSGVO/GDPR)39284580k+Missing nonce verification
#10hCaptcha for WP421151870k+Exception output is not escaped
#11reCAPTCHA for WooCommerce42803140k+Output is not escaped
#12Maspik – Ultimate Spam Protection2821286230k+Missing nonce verification
#13Stop Spammers Classic94185130k+wp function not compatible with requires wp
#14Cookies for Comments39222920k+Input is not validated
#15Zero Spam for WordPress347939320k+Non-prefixed global variable
#16Delete Pending Comments57161110k+Unsafe printing function
#17WPBruiser {no- Captcha anti-Spam}2564625910k+Non Singular String Literal Domain
#18Simple Login Captcha70201910k+date date
#19Stop WP Emails Going to Spam991310k+trademarked term
#20Throws SPAM Away3432712310k+Missing Arg Domain
#21Friendly Captcha for WordPress35192629k+Output is not escaped
#22Exploit Scanner37251308k+Non-prefixed global variable
#23Simply Disable Comments10006k+No open findings
#24Spam Destroyer3763436k+rand rand
#25Kama SpamBlock642975k+Short PHP open tag found
#26Block List Updater99104k+outdated tested upto header
#27Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms402724k+Direct Query
#28Anti-spam Reloaded4319192k+Output is not escaped
#29Dam Spam10012k+unexpected markdown file
#30Disable WP Registration Page89492k+trademarked term
#31WP Spam Question Filter3563302k+Output is not escaped
#32Anti-Captcha (anti-spam botblocker)5623261k+rand mt rand
#33Batch Comment Spam Deletion4622151k+Nonce verification recommended
#34Block Specific Spam Woo Orders99141k+Non-prefixed hook name
#35Message Filter for Contact Form 7241,0571,5941k+Non-prefixed global variable
#36Comment Blacklist Updater4245151k+Output is not escaped
#37Honeypot Anti Spam for Forminator Forms75471k+Missing nonce verification
#38Rut Chileno con Validación para WooCommerce4335161k+Text Domain Mismatch
#39Uber reCaptcha43129451k+Text Domain Mismatch
#40User Spam Remover31115141k+Output is not escaped
#41FV Antispam26332239900Output is not escaped
#42Smart Attachment Page Remove44823900Output is not escaped
#43Analytics Spam Blocker377622800Unsafe printing function
#44Block Comment Spam Bots353117800Output is not escaped
#45CM E-Mail Blacklist – Simple email filtering for safer registration35269205800Output is not escaped
#46Pixeline's Email Protector35775800Unsafe printing function
#47WP fail2ban Add-on for Contact Form 7851018800Non-prefixed constant
#48Bulk Comments Management75625700Direct Query
#49Honeypot Plus for Contact Form 777317700Missing nonce verification
#50Block Emails & Addresses for WooCommerce Checkout70412700error log set error handler